Hynek Mlnarik
24a36e6848
KEYCLOAK-4057 Do not include KeyName for brokered IdPs
...
Active Directory Federation Services require that the subject name
matches KeyName element when present. While KeyName is beneficial for
Keycloak adapters, it breaks functionality for AD FS as the name
included there is a key ID, not certificate subject expected by AD FS.
This patch contains functionality that excludes KeyName from SAML
messages to identity providers. This behaviour should be made
configurable per client/identity provider and is prepared to do so,
however actual GUI changes are left for a separate patch.
2016-12-09 14:33:40 +01:00
Bill Burke
d3e3990d77
Merge pull request #3629 from patriot1burke/master
...
KEYCLOAK-2806
2016-12-08 17:36:28 -05:00
Bill Burke
0550bdb467
KEYCLOAK-3214
2016-12-08 16:47:17 -05:00
Bill Burke
5f07fa8057
KEYCLOAK-2806
2016-12-08 16:28:22 -05:00
Marek Posolda
10064fdac9
Merge pull request #3628 from mposolda/master
...
KEYCLOAK-4058 Improve LDAPStorageMapper and remove LDAPStorageMapperB…
2016-12-08 19:36:25 +01:00
mposolda
e7f6c780e2
KEYCLOAK-4058 Improve LDAPStorageMapper and remove LDAPStorageMapperBridge
2016-12-08 18:35:56 +01:00
Marek Posolda
e03b72df00
Merge pull request #3627 from mposolda/master
...
KEYCLOAK-4049 Admin Console: User Federation: Client ids not listed i…
2016-12-08 15:02:32 +01:00
mposolda
7d8b392fd9
KEYCLOAK-4049 Admin Console: User Federation: Client ids not listed in role-ldap-mapper
2016-12-08 13:46:19 +01:00
Marek Posolda
afa8dc735d
Merge pull request #3625 from mhajas/KEYCLOAK-3339
...
KEYCLOAK-3339 Fix authorization tests on EAP6 + JDK7
2016-12-08 11:42:11 +01:00
Marek Posolda
d49a74b927
Merge pull request #3624 from mhajas/KEYCLOAK-4051
...
KEYCLOAK-4051 Use debug instead of debugf
2016-12-08 11:40:27 +01:00
mhajas
e0c62e25b2
KEYCLOAK-3339 Fix authorization tests on EAP6 + JDK7
2016-12-08 09:50:14 +01:00
mhajas
081958e282
KEYCLOAK-4051 Use debug instead of debugf
2016-12-08 09:42:52 +01:00
Bill Burke
379d5e3228
Merge pull request #3623 from patriot1burke/master
...
KEYCLOAK-3973
2016-12-07 17:00:52 -05:00
Bill Burke
9b18601102
KEYCLOAK-3973
2016-12-07 16:10:33 -05:00
Stan Silvert
7868152ffe
Merge pull request #3622 from vramik/KEYCLOAK-4022
...
KEYCLOAK-4022 added missing test
2016-12-07 14:10:13 -05:00
Bill Burke
223cc1fb50
KEYCLOAK-3973
2016-12-07 12:56:03 -05:00
Vlasta Ramik
6ae9d19843
KEYCLOAK-4022 added missing test
2016-12-07 16:22:08 +01:00
Bill Burke
cbe4ff324c
Merge pull request #3621 from patriot1burke/master
...
fix adapter test
2016-12-07 10:00:00 -05:00
Bill Burke
b8c06dd560
fix adapter test
2016-12-07 09:50:17 -05:00
Bill Burke
31d2cde6e5
Merge pull request #3615 from abstractj/KEYCLOAK-3560
...
[KEYCLOAK-3560]: Unable to import exported users which contain terms_and_conditions required action
2016-12-06 22:07:58 -05:00
Bill Burke
75e2b404c8
Merge pull request #3618 from abstractj/KEYCLOAK-3685
...
[KEYCLOAK-3685]: Username not updated when "Email as username" is enabled
2016-12-06 22:06:55 -05:00
Bill Burke
d163dad3fe
Merge pull request #3620 from patriot1burke/master
...
KEYCLOAK-3509
2016-12-06 20:08:36 -05:00
Bill Burke
7271fdaaaa
KEYCLOAK-3509
2016-12-06 18:52:37 -05:00
Bill Burke
03fbb3c853
Merge pull request #3619 from patriot1burke/master
...
KEYCLOAK-2705
2016-12-06 18:46:59 -05:00
Bill Burke
68c8bfa0e1
KEYCLOAK-2705
2016-12-06 17:32:41 -05:00
Bill Burke
f34b47d29c
Merge pull request #3617 from patriot1burke/master
...
KEYCLOAK-2654
2016-12-06 17:06:10 -05:00
Bill Burke
a0b54ebedc
KEYCLOAK-2654
2016-12-06 17:05:34 -05:00
Bruno Oliveira
ddb201db6c
[KEYCLOAK-3685]: Username not updated when "Email as username" is enabled
2016-12-06 19:46:31 -02:00
Bruno Oliveira
15f23eb045
[KEYCLOAK-3560]: Unable to import exported users which contain terms_and_conditions required action
2016-12-06 15:29:56 -02:00
Bill Burke
77d17de14d
Merge pull request #3611 from patriot1burke/master
...
KEYCLOAK-3620
2016-12-06 08:18:36 -05:00
Bill Burke
bab08bf8f0
Merge remote-tracking branch 'upstream/master'
2016-12-06 08:18:05 -05:00
Marek Posolda
9cd3034762
Merge pull request #3613 from mposolda/master
...
KEYCLOAK-4042 Better error message when failed updating MSAD password…
2016-12-06 11:50:33 +01:00
mposolda
ba51640c61
KEYCLOAK-4042 Better error message when failed updating MSAD password in account mgmt
2016-12-06 11:07:28 +01:00
Marek Posolda
287593d75f
Merge pull request #3612 from hmlnarik/KEYCLOAK-3655-Unexpected-server-error-when-adding-duplicate-auth-flow
...
KEYCLOAK-3655 Tests for adding duplicate auth flow
2016-12-06 10:27:15 +01:00
Marek Posolda
3826e933c1
Merge pull request #3609 from hmlnarik/KEYCLOAK-3439-database-encoding
...
KEYCLOAK-4026 - Workaround for liquibase error in MySQL/MariaDB
2016-12-06 10:25:08 +01:00
Marek Posolda
6b1020ec34
Merge pull request #3602 from sldab/fix-model-duplicate-exception
...
KEYCLOAK-4028 Fix ModelDuplicateException when logging in with updated email address
2016-12-06 10:21:55 +01:00
Marek Posolda
c8b22e71f0
Merge pull request #3573 from glavoie/KEYCLOAK-4003
...
KEYCLOAK-4003: Slow Infinispan RoleAdapter.hasRole() call.
2016-12-06 09:49:42 +01:00
Hynek Mlnarik
41a5598103
KEYCLOAK-3655 Tests for adding duplicate auth flow
2016-12-06 08:52:38 +01:00
Bill Burke
fc92639d3f
KEYCLOAK-3620
2016-12-05 17:52:00 -05:00
Bill Burke
6587cd2478
KEYCLOAK-3620
2016-12-05 17:51:06 -05:00
Stan Silvert
e55c2ae554
Merge pull request #3610 from ssilvert/disable-confidential-tab
...
KEYCLOAK-4039: Unexpected behavior when switching client access type.
2016-12-05 15:30:39 -05:00
Bill Burke
693d6c0e5d
Merge pull request #3608 from hmlnarik/KEYCLOAK-4035
...
KEYCLOAK-4035 Composite roles need to be expanded in SAML attribute mapper
2016-12-05 14:44:21 -05:00
Bill Burke
952c1decf0
Merge pull request #3607 from patriot1burke/master
...
KEYCLOAK-4033
2016-12-05 14:44:07 -05:00
Stan Silvert
f3dbacabf8
KEYCLOAK-4039: Unexpected behavior when switching client access type.
2016-12-05 14:16:24 -05:00
Hynek Mlnarik
819105c3aa
KEYCLOAK-4026 - Workaround for liquibase error in MySQL/MariaDB
2016-12-05 16:48:52 +01:00
Bill Burke
06affc0700
Merge pull request #3595 from dehort/KEYCLOAK-4020
...
Modified the saml parser to handle boolean attribute value types
2016-12-05 10:19:30 -05:00
Bill Burke
f03d79c7d3
Merge pull request #3603 from thomasdarimont/issue/KEYCLOAK-3969-Allow-authentication-via-ScriptAuthenticator-without-user
...
KEYCLOAK-3969 Allow use of ScriptAuthenticator without user
2016-12-05 10:19:02 -05:00
Bill Burke
b52936bc5b
Merge pull request #3604 from hmlnarik/KEYCLOAK-3950-NPE-when-request-includes-NameIDPolicy-but-format-is-missing
...
KEYCLOAK-3950 Fix NPE on request for NameIDPolicy without format
2016-12-05 10:17:04 -05:00
Hynek Mlnarik
3c4114091f
KEYCLOAK-4035 Composite roles need to be expanded in SAML attribute mapper
2016-12-05 16:16:08 +01:00
Bill Burke
d354aa1f62
KEYCLOAK-4033
2016-12-05 10:15:55 -05:00